CentOS 9 : linuxptp-3.1.1-2.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the linuxptp-3.1.1-2.el9 build changelog. - A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows...

CentOS 9 : vim-8.2.2637-16.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the vim-8.2.2637-16.el9 build changelog. - Use of Out-of-range Pointer Offset in vim prior CVE-2022-0554 - Heap-based Buffer Overflow occurs in vim CVE-2022-0943 Note that Nessus h...

CentOS 9 : open-vm-tools-12.2.5-2.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the open-vm- tools-12.2.5-2.el9 build changelog. - SAML token signature bypass rhel-9 CVE-2023-20900 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 9 : libfastjson-0.99.9-4.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libfastjson-0.99.9-4.el9 build changelog. - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. CVE-2020-127...

CentOS 9 : postgresql-jdbc-42.2.18-6.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the postgresql-jdbc-42.2.18-6.el9 build changelog. - PostgreSQL JDBC Driver PgJDBC for short allows Java programs to connect to a PostgreSQL database using standard, database independent Ja...

CentOS 9 : dpdk-21.11.2-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dpdk-21.11.2-1.el9 build changelog. - A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by...

CentOS 9 : libksba-1.5.1-5.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libksba-1.5.1-5.el9 build changelog. - A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for...

CentOS 9 : toolbox-0.0.99.4-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the toolbox-0.0.99.4-3.el9 build changelog. - Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause...

CentOS 9 : python3.9-3.9.14-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the python3.9-3.9.14-1.el9 build changelog. - In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap...

CentOS 9 : util-linux-2.37.4-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the util-linux-2.37.4-3.el9 build changelog. - A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE...

CentOS 9 : speex-1.2.0-11.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the speex-1.2.0-11.el9 build changelog. - divide by zero in readsamples via crafted WAV file CVE-2020-23903 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 9 : gimp-2.99.8-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the gimp-2.99.8-3.el9 build changelog. - GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of...

CentOS 9 : firefox-102.8.0-2.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the firefox-102.8.0-2.el9 build changelog. - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is...

CentOS 9 : libxml2-2.9.13-4.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libxml2-2.9.13-4.el9 build changelog. - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. Thi...

CentOS 9 : c-ares-1.19.1-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the c-ares-1.19.1-1.el9 build changelog. - AutoTools does not set CARESRANDOMFILE during cross compilation rhel-9 CVE-2023-31124 - Buffer Underwrite in aresinetnetpton rhel-9...

CentOS 9 : dbus-broker-28-7.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the dbus- broker-28-7.el9 build changelog. - An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file...

CentOS 9 : runc-1.1.7-2.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the runc-1.1.7-2.el9 build changelog. - runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a...

CentOS 9 : pki-core-11.2.1-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the pki- core-11.2.1-1.el9 build changelog. - access to external entities when parsing XML can lead to XXE rhel-9.1.0 CVE-2022-2414 Note that Nessus has not tested for this issue but has...

CentOS 9 : python-cryptography-36.0.1-3.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the python- cryptography-36.0.1-3.el9 build changelog. - Don't allow updateinto to mutate immutable objects, resolves rhbz2172399 CVE-2023-23931 Note that Nessus has not tested for this iss...

CentOS 9 : libarchive-3.5.3-4.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libarchive-3.5.3-4.el9 build changelog. - In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the...